Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/03875ff3-ba37-3750-afac-db122214742a.roa
File: 03875ff3-ba37-3750-afac-db122214742a.roa (raw, json)
Hash identifier: UGi/e//aCzk6YPkmWjh3/0zbWpUnIz+PcwiWzE9mYr4=
Subject key identifier: F0:5B:F8:DC:A2:07:3C:48:E0:40:CA:CD:11:53:FA:A9:68:71:7E:2B
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487E50671651D68AF1A104DB80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/03875ff3-ba37-3750-afac-db122214742a.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 192.67.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:67:16:51:d6:8a:f1:a1:04:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=4074a701-094f-4256-8afd-12cefdf37d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:24:fa:bd:8b:60:f8:8e:5d:c6:87:c6:af:
12:39:95:db:e2:ec:a4:e5:40:c5:70:1e:87:c9:75:
c3:3c:c5:84:2e:fd:ba:04:52:4e:50:a1:85:e7:65:
2e:ad:d2:1c:2a:71:47:4f:2a:9b:09:05:09:64:17:
70:23:c6:10:92:b3:9d:fe:53:83:fe:b8:b9:ad:26:
eb:2e:40:78:bb:de:9b:36:7a:5f:43:e1:eb:7e:98:
59:96:ac:24:d0:c3:65:f5:19:82:10:9d:d3:d7:34:
5a:47:c2:c2:82:2e:88:01:29:fb:11:a6:4d:09:c0:
f0:ac:09:b8:9a:cc:09:24:02:15:22:78:4f:0f:e6:
bd:c6:0b:57:d6:31:7c:36:2b:a7:85:1f:15:d6:f0:
ec:02:29:d3:fc:b0:30:fe:e6:ed:11:87:5a:52:fa:
d9:5d:5e:ce:46:bb:52:51:08:80:84:0e:02:83:a5:
73:4e:76:9e:6f:4c:93:a1:37:c2:ac:0b:83:ab:d0:
c5:f8:bc:47:9f:4d:52:fd:13:6b:81:a4:fc:dd:fa:
56:df:6f:38:4b:3a:71:56:a3:b9:82:2f:ca:a6:77:
47:56:72:31:5f:72:d9:e0:14:5e:53:7b:23:b5:16:
4b:14:86:f6:99:e5:75:10:fa:b2:a5:f4:f3:fe:79:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:F8:DC:A2:07:3C:48:E0:40:CA:CD:11:53:FA:A9:68:71:7E:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/03875ff3-ba37-3750-afac-db122214742a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:45:01:7c:f8:a1:a5:24:06:52:9c:23:ac:27:4b:48:d9:ef:
71:c5:e9:cc:06:52:67:dc:d8:a7:d7:43:ce:a4:33:f3:e2:1b:
2b:3d:3f:20:ca:5e:87:0b:26:3c:bf:43:68:6d:86:97:f8:27:
e7:7b:22:1d:07:30:37:a9:d9:d6:3f:07:e2:4a:dd:49:cf:03:
28:d8:c1:d2:60:dc:a1:b6:ce:23:61:76:3e:86:a1:09:c2:44:
38:80:02:76:5f:23:2d:ad:b1:82:37:c3:cd:8e:45:13:81:98:
37:07:7d:cb:ed:d1:f2:d1:58:17:93:7a:d1:09:39:be:1c:4b:
86:43:78:9c:c0:5d:36:5a:04:6d:1a:91:7c:37:e4:fe:4c:56:
c6:51:a3:0e:49:1f:1b:16:e1:a8:78:80:37:be:08:eb:62:9a:
56:32:41:93:7a:8a:eb:61:9a:84:4d:fa:28:41:c8:a2:ac:6d:
87:39:10:40:27:df:e9:20:09:7d:61:f7:41:92:52:e6:ca:23:
82:42:a7:ed:02:df:95:0a:f9:d4:7d:4a:b1:d4:93:29:ba:b0:
10:23:06:e1:62:07:b3:7d:95:03:05:4f:22:fc:7d:96:e6:6c:
22:c5:cf:b6:02:f7:62:99:80:27:de:f3:42:98:98:db:c9:6c:
3d:a0:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:36 2025 by rpki-client